Warning: Permanently added '[localhost]:47288' (ECDSA) to the list of known hosts.
2024/10/25 18:07:36 fuzzer started
2024/10/25 18:07:37 dialing manager at localhost:45639
syzkaller login: [   62.473975] cgroup: Unknown subsys name 'net'
[   62.568124] cgroup: Unknown subsys name 'cpuset'
[   62.589941] cgroup: Unknown subsys name 'rlimit'
2024/10/25 18:07:54 syscalls: 202
2024/10/25 18:07:54 code coverage: enabled
2024/10/25 18:07:54 comparison tracing: enabled
2024/10/25 18:07:54 extra coverage: enabled
2024/10/25 18:07:54 setuid sandbox: enabled
2024/10/25 18:07:54 namespace sandbox: enabled
2024/10/25 18:07:54 Android sandbox: enabled
2024/10/25 18:07:54 fault injection: enabled
2024/10/25 18:07:54 leak checking: enabled
2024/10/25 18:07:54 net packet injection: enabled
2024/10/25 18:07:54 net device setup: enabled
2024/10/25 18:07:54 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2024/10/25 18:07:54 devlink PCI setup: PCI device 0000:00:10.0 is not available
2024/10/25 18:07:54 USB emulation: enabled
2024/10/25 18:07:54 hci packet injection: enabled
2024/10/25 18:07:54 wifi device emulation: enabled
2024/10/25 18:07:54 802.15.4 emulation: enabled
2024/10/25 18:07:54 fetching corpus: 0, signal 0/0 (executing program)
2024/10/25 18:07:55 starting 8 fuzzer processes
18:07:55 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x64, 0x4, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_HOOK={0x24, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x712c8b94}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cc93ff}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x49c336bd}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x8804}, 0x8010)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x70, 0x2, 0x7, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7fff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xda}]}, @NFACCT_FLAGS={0x8}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x80}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x100}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x101}]}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x11}, 0x20000000)
sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0xf, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x24000810)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0xd, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r2, &(0x7f0000000ac0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a80)={&(0x7f0000000980)={0xd0, 0x2, 0x7, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x3}, @NFACCT_FILTER={0x3c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x401}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7ab3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFACCT_FILTER={0x2c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x67}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x10000}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfd}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0xc088}, 0x40)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ_RESET(r3, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x6c, 0x15, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000010)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000001040)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001000)={&(0x7f0000000c80)={0x344, 0x1, 0x3, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFQA_CT={0x140, 0xb, 0x0, 0x1, [@CTA_TUPLE_REPLY={0x94, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x9f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2f}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_TUPLE_REPLY={0x58, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_SEQ_ADJ_ORIG={0x2c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xe84}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5c}, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x10001}]}, @CTA_SEQ_ADJ_REPLY={0x24, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x13c}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3f}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x77}]}]}, @NFQA_EXP={0x1f0, 0xf, 0x0, 0x1, [@CTA_EXPECT_MASTER={0x94, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x27}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2e}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x43}}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7d50}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x7fff}, @CTA_EXPECT_NAT={0x100, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0xa8, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x13}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0xfc}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @multicast2}}}]}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_MASK={0x28, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @empty}}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xfffffffb}, @CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_HELP_NAME={0xf, 0x6, 'tftp-20000\x00'}]}]}, 0x344}, 0x1, 0x0, 0x0, 0x882}, 0x4000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f00000016c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001680)={&(0x7f00000015c0)={0xa8, 0x0, 0x8, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf8}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x7fff}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0xee}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88fb}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x98}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x15}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0xa8}, 0x1, 0x0, 0x0, 0x810}, 0x8880)
r5 = syz_open_procfs(0x0, &(0x7f0000001700)='oom_score\x00')
sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000001940)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x44}, 0xc, &(0x7f0000001900)={&(0x7f0000001780)={0x158, 0x1, 0x2, 0x102, 0x0, 0x0, {0xc, 0x0, 0x8}, [@CTA_EXPECT_NAT={0xc0, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0xb4, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}}}]}]}, @CTA_EXPECT_MASK={0x84, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x42}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x20}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x4800}, 0x4)
r6 = openat$incfs(r5, &(0x7f0000001980)='.log\x00', 0x249c0, 0x125)
ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f00000019c0)={@loopback, 0x18})
sendmsg$IPSET_CMD_TYPE(r5, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x24, 0xd, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x20000040)
socketpair(0x2c, 0x5, 0x2, &(0x7f0000001b00)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$NFT_MSG_GETCHAIN(r7, &(0x7f0000001c80)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001b80)={0x9c, 0x4, 0xa, 0x101, 0x0, 0x0, {0xc, 0x0, 0x9}, [@NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x37}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_HOOK={0x1c, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x60254568}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4dccf3c3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7d29810d}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)

18:07:55 executing program 1:
r0 = gettid()
sched_rr_get_interval(r0, &(0x7f0000000000))
r1 = fork()
sched_rr_get_interval(r1, &(0x7f0000000040))
sched_rr_get_interval(r0, &(0x7f0000000080))
sched_rr_get_interval(r0, &(0x7f00000000c0))
r2 = gettid()
sched_rr_get_interval(r2, &(0x7f0000000100))
sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000140))
r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000180)='.log\x00', 0x181400, 0xa0)
write$cgroup_pid(r3, &(0x7f00000001c0)=r1, 0x12)
io_uring_setup(0x7d7b, &(0x7f0000000200)={0x0, 0xf77e, 0x10, 0x3, 0x119})
r4 = syz_open_procfs(r2, &(0x7f0000000280)='net/sockstat\x00')
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x1, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x80000001}, @CTA_EXPECT_TIMEOUT={0x8}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x8000000)
clock_gettime(0x5, &(0x7f0000000480))
sched_rr_get_interval(r2, &(0x7f00000004c0))
select(0x40, &(0x7f0000000500)={0xf983, 0x8, 0x8, 0x485, 0x5, 0xcfc, 0x1, 0x7}, &(0x7f0000000540)={0x6e, 0xb52, 0x3ff, 0x100, 0x1, 0xfff, 0xff, 0x1f}, &(0x7f0000000580)={0xfffffffffffffffc, 0xffffffffffffffc0, 0x1, 0x8001, 0x2, 0x8000, 0x401, 0x800}, &(0x7f00000005c0))
clock_gettime(0x0, &(0x7f0000000600))
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x5c}}, 0x4008014)

18:07:55 executing program 2:
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x2, 0x1, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xfffffff7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}]}, @CTA_TUPLE_ORIG={0x1c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x403}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x200}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4c085}, 0x24004040)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='personality\x00')
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x13, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x40884}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20a400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, 0x2, 0x8, 0x801, 0x0, 0x0, {0xc, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x2894)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000700)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f00000003c0)={0x2f8, 0x17, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x170, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffff}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1b}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'batadv_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'ipvlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1ff}]}, @NFTA_FLOWTABLE_HOOK={0x148, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x200}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'xfrm0\x00'}, {0x14}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'vlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x20}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'bridge0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip_vti0\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8}]}, 0x2f8}, 0x1, 0x0, 0x0, 0x4000}, 0x8080)
r2 = openat$incfs(r0, &(0x7f0000000740)='.log\x00', 0x80180, 0x6)
sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x38, 0x7, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7f}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x4000001)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0xac, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_EXPECT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xb2}}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASK={0x4c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_MASTER={0x14, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x3}]}, 0xac}, 0x1, 0x0, 0x0, 0x884}, 0x8004)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x44, 0x2, 0x8, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0xffffff55}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x10}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xabfd}]}, 0x44}, 0x1, 0x0, 0x0, 0x44}, 0x40000)
socketpair(0x2, 0x5, 0xd08, &(0x7f0000000cc0)={<r3=>0xffffffffffffffff})
sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0xa, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}, @IPSET_ATTR_LINENO={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_GETPDP(r4, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x34, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010100}]}, 0x34}, 0x1, 0x0, 0x0, 0x841}, 0x8051)
sendmsg$NFT_MSG_GETGEN(r1, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x14, 0x10, 0xa, 0x900, 0x0, 0x0, {0x3, 0x0, 0x5}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8050}, 0x4048880)
sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x48, 0x1, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x1)
getsockopt$bt_sco_SCO_OPTIONS(r3, 0x11, 0x1, &(0x7f0000001440)=""/174, &(0x7f0000001500)=0xae)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000001540)='./file0\x00', 0x80, 0x89)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r5, 0xc0406619, &(0x7f0000001580)={@desc={0x1, 0x0, @auto="ba6e9955a0529976"}})
sendmsg$NFT_BATCH(r0, &(0x7f00000017c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001780)={&(0x7f0000001600)={{0x14}, [@NFT_MSG_DELCHAIN={0xb0, 0x5, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_HOOK={0x44, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x77f9ffdc}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_DEV={0x14, 0x3, 'team_slave_0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'ipvlan1\x00'}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, @NFT_MSG_DELFLOWTABLE={0x28, 0x18, 0xa, 0x300, 0x0, 0x0, {0x8, 0x0, 0x9}, [@NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x3c, 0x16, 0xa, 0x101, 0x0, 0x0, {0xc, 0x0, 0x7}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8}]}], {0x14}}, 0x15c}}, 0x1)

18:07:55 executing program 3:
pselect6(0x40, &(0x7f0000000000)={0xc1d4, 0x9, 0x7, 0x0, 0x8001, 0x3, 0x7}, &(0x7f0000000040)={0x4ddb, 0xffffffffffffffe0, 0x1, 0x0, 0x5, 0x6, 0xabd, 0x80}, &(0x7f0000000080)={0x3, 0x8, 0x5b102511, 0x7, 0x5, 0x7, 0x8, 0xe2}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0x1]}, 0x8})
prctl$PR_GET_FP_MODE(0x2e)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0xc044}, 0x4041)
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000280))
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan0\x00', <r1=>0x0})
sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0xa03d8d483cc3425f, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x48}, 0x1, 0x0, 0x0, 0x40040}, 0x20000000)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), r0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, r2, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0xfffffc00}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x2}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc000}, 0x8080)
r4 = gettid()
syz_open_procfs$namespace(r4, &(0x7f00000005c0)='ns/net\x00')
r5 = openat$incfs(0xffffffffffffffff, &(0x7f0000000640)='.log\x00', 0x8801, 0x100)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, r2, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000)
ioctl$SIOCGSTAMPNS(r5, 0x8907, &(0x7f0000000740))
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000a80)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a40)={&(0x7f00000007c0)={0x27c, r2, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0x24, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xa9}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVKEY={0x38, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffffffa}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1000}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVKEY={0x134, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x1c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3ff}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_DEVKEY_ATTR_ID={0xd4, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x48, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x7ffc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x80}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2}]}, @NL802154_ATTR_SEC_DEVKEY={0xb8, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x18, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}]}, @NL802154_DEVKEY_ATTR_ID={0x84, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x10000}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x97ac}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}]}, 0x27c}, 0x1, 0x0, 0x0, 0x2000c800}, 0x44)
fork()
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000b00)={'wpan4\x00', <r6=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000000bc0)={&(0x7f0000000ac0), 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x2c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4084}, 0x20044810)
sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x30, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xf0}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "ff7df616061f8bf26288072bf258c2e0"}]}, 0x30}, 0x1, 0x0, 0x0, 0x80c0}, 0x4)

[   80.440245] audit: type=1400 audit(1729879675.767:7): avc:  denied  { execmem } for  pid=271 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
18:07:55 executing program 5:
ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000000))
ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000040))
r0 = socket$inet6(0xa, 0x800, 0x7)
getsockname(r0, &(0x7f0000000080)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in, @in=@initdev}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xe8)
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000280)={0x0, "bd3bbb1474522627cc816581c6a59bc5"})
socketpair(0xa, 0xa, 0x5da, &(0x7f0000001280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x24, 0x3, 0x3, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x399}]}, 0x24}, 0x1, 0x0, 0x0, 0x48804}, 0x6)
r3 = accept4$inet6(r1, &(0x7f00000013c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000001400)=0x1c, 0x800)
setsockopt$inet6_int(r3, 0x29, 0xcb, &(0x7f0000001440)=0x4, 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
getsockname(r4, &(0x7f0000001480)=@pppol2tp={0x18, 0x1, {0x0, <r5=>0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000001500)=0x80)
pselect6(0x40, &(0x7f0000001540)={0x3, 0xffffffffffffffff, 0x5, 0x0, 0x2, 0x401, 0x3, 0x78}, &(0x7f0000001580)={0x400, 0x2, 0x812, 0x7fff, 0x5, 0x81, 0x3, 0x9}, &(0x7f00000015c0)={0x7fffffff, 0x11, 0x794, 0x80000001, 0x7f, 0x0, 0xd440, 0x3dd455ac}, &(0x7f0000001600)={0x0, 0x989680}, &(0x7f0000001680)={&(0x7f0000001640)={[0x6]}, 0x8})
setsockopt$inet6_buf(r2, 0x29, 0x2b, &(0x7f00000016c0)="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", 0xfd)
r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000001800), r2)
sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x1c, r6, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x1c}}, 0x20000000)
sendmsg$OSF_MSG_REMOVE(r5, &(0x7f0000001e40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001e00)={&(0x7f0000001940)={0x4bc, 0x1, 0x5, 0x401, 0x0, 0x0, {0xc, 0x0, 0x1}, [{{0x254, 0x1, {{0x1, 0xfffffffb}, 0x6, 0x1, 0x9, 0x0, 0x7, 'syz0\x00', "5ac940ba0bc35fdd04010aef308f112962eacaf4d95185f5af52741b44267a0d", "e1ff10974abe2da7610d12166231e2bd0f927ec72b5e62877460ba937324e640", [{0x0, 0x4, {0x1, 0x7fff}}, {0x8b, 0x2, {0x1, 0x7fff}}, {0x800, 0xffe1, {0x3, 0xe0000000}}, {0x8, 0x7bf, {0x1, 0xfffffffa}}, {0x101, 0x1f, {0x1, 0x7}}, {0xffff, 0x6, {0x3, 0x80000000}}, {0x3f, 0xb1, {0x1}}, {0xa4, 0x3, {0x3, 0x7fffffff}}, {0x2, 0x3, {0x1, 0x7f}}, {0x1, 0xff, {0x3, 0x3ff}}, {0x2, 0x1e2d, {0x2, 0x9}}, {0x401, 0xb59d, {0x1, 0xffffffff}}, {0x93c, 0x1, {0x3, 0x5}}, {0x9, 0xd7, {0x2, 0x7}}, {0xef, 0x101, {0x2, 0x5}}, {0x401, 0x6, {0x2, 0x3}}, {0x800, 0x3, {0x1, 0x9}}, {0x4, 0x6, {0x0, 0x1}}, {0x527, 0x80, {0x0, 0x2}}, {0x800, 0x3, {0x0, 0xa2dc}}, {0x80, 0x1f, {0x0, 0xffe0000}}, {0x8, 0x1, {0x2, 0x8a}}, {0x8, 0x469e, {0x2, 0xbfdd}}, {0x0, 0x1ff, {0x2, 0x6}}, {0x8, 0x200, {0x0, 0x5}}, {0x9, 0x3, {0x0, 0x81}}, {0x401, 0x2, {0x1, 0x7}}, {0xca49, 0x5, {0x2, 0x4}}, {0x1, 0x0, {0x1, 0x5}}, {0x497, 0xfff, {0x1, 0x5b}}, {0xa31, 0x8, {0x1, 0x54d1e620}}, {0x5, 0x5, {0x3, 0x2}}, {0x4c, 0x3, {0x2}}, {0x5, 0x9, {0x5}}, {0x0, 0x3da, {0x1, 0x20}}, {0xc, 0x3, {0x3, 0x1e}}, {0x9, 0x8, {0x1, 0x7894}}, {0x1, 0x3bf0, {0x3, 0x8a2d}}, {0xde1, 0x4, {0x2, 0x96}}, {0xfffc, 0x4, {0x1}}]}}}, {{0x254, 0x1, {{0x0, 0x100}, 0x0, 0x20, 0x0, 0xffff, 0x9, 'syz1\x00', "6887655236d748e3d03605d3eb7961701417c8d8baa57ea6e9cea04917cd1075", "98590dfa2ebd1ff4f9f69348c4292a3e4f2e904fb87518b60077f337b507f2a0", [{0x5, 0x3f, {0x2, 0xd6}}, {0x3, 0x4, {0x2, 0xfffffff7}}, {0x5, 0x3f, {0x1, 0x10001}}, {0x6726, 0x0, {0x1, 0xfe}}, {0x3, 0xffff, {0x0, 0x20}}, {0xb285, 0x354, {0x1, 0x80}}, {0xcef, 0x4, {0x2, 0x1ff}}, {0x1ff, 0x80, {0x0, 0x5}}, {0x200, 0x9, {0x3, 0x416}}, {0x100, 0xce, {0x0, 0x8}}, {0x4, 0x5, {0x0, 0x9}}, {0x8, 0x4, {0x3, 0x3}}, {0x2, 0x2, {0x0, 0xc1c0}}, {0x3f, 0x0, {0x1, 0x2c6f70d3}}, {0x2b07, 0x7fff}, {0x993e, 0xdcd, {0x5477922d03c3592, 0xfffffff7}}, {0x0, 0x7, {0x3, 0xa7f}}, {0x1, 0x20, {0x3, 0x6}}, {0x4, 0x1, {0x3, 0x7fff}}, {0x9, 0x1000, {0x0, 0x2193}}, {0x400, 0x81, {0x2, 0x2}}, {0xffff, 0xfff, {0x0, 0x7}}, {0x1, 0x3, {0x3, 0x3}}, {0x6, 0x89, {0x1, 0xffffffff}}, {0x6, 0x9, {0x0, 0x81}}, {0x2, 0x20b9, {0x2, 0x3a9}}, {0x9, 0x4, {0x1, 0x80}}, {0x0, 0x27, {0x1, 0x6ed3}}, {0x2, 0x6, {0x1, 0x4}}, {0xc0d, 0x3ff, {0x3, 0x7}}, {0xc3d, 0x4564, {0x3, 0xb9f}}, {0x6, 0xfffd, {0x3, 0x6}}, {0xffff, 0x7f, {0x2, 0x2}}, {0x14f, 0x20, {0x3, 0x2}}, {0x3ff, 0x1, {0x0, 0xaa}}, {0x9, 0x8, {0x2, 0xffffffff}}, {0x4, 0x0, {0x2, 0xfffffffe}}, {0x7f, 0x20, {0x1, 0xdc9}}, {0x19, 0x8, {0x1, 0xfffffffc}}, {0x401, 0x4, {0x2, 0xdb}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x800}, 0xc840)
openat$random(0xffffffffffffff9c, &(0x7f0000001e80), 0x101400, 0x0)
clock_gettime(0x0, &(0x7f0000001f80)={<r7=>0x0, <r8=>0x0})
pselect6(0x40, &(0x7f0000001ec0)={0x4, 0x4, 0x5, 0x8bf0, 0x5, 0x5d5, 0x2, 0x2}, &(0x7f0000001f00)={0x6, 0x86, 0x8, 0xff, 0x1000, 0xef, 0x7, 0x7}, &(0x7f0000001f40)={0x43db, 0x400, 0xffff, 0x6, 0x0, 0x8, 0x9, 0xfff}, &(0x7f0000001fc0)={r7, r8+60000000}, &(0x7f0000002040)={&(0x7f0000002000)={[0xfffffffffffff000]}, 0x8})

18:07:55 executing program 6:
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x1, 0x4, 0x101, 0x0, 0x0, {0xc, 0x0, 0x9}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x5}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_MODE={0xa, 0x2, {0x9f6, 0x3}}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x7}, @NFULA_CFG_MODE={0xa, 0x2, {0xfff, 0x2}}, @NFULA_CFG_MODE={0xa, 0x2, {0x4, 0x1}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x1b85, 0x1}}]}, 0x6c}}, 0x40000)
sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, 0x3, 0x7, 0x801, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x101}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_FILTER={0x4}, @NFACCT_FLAGS={0x8}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3ff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x80}]}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8080}, 0x800)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x3, 0x2, 0x5, 0x0, 0x0, {0x3, 0x0, 0x2}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x20040804)
ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000380))
r0 = openat$urandom(0xffffffffffffff9c, &(0x7f00000003c0), 0x40000, 0x0)
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000480)={{}, 0x0, 0xa, @inherit={0x58, &(0x7f0000000400)={0x0, 0x2, 0x8, 0x7, {0x29, 0x77, 0x67, 0x6, 0x81}, [0x1, 0x400]}}, @devid})
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000001480)={0x4, 0x1, {0x1, @struct={0x7ff, 0x40af}, 0x0, 0x8, 0x7, 0x1, 0x6c, 0x4, 0x83, @struct={0xeb6, 0xd16}, 0x200000, 0x9, [0x8, 0xffffffffffff9551, 0x101, 0x4f24, 0x8, 0x8000]}, {0x6, @struct={0x8201, 0x1}, 0x0, 0x5, 0x10000, 0x234e, 0x800, 0x5, 0x4, @usage, 0x9, 0x100, [0x93a5, 0x0, 0x1, 0x101, 0xffffffffffff8000, 0xa2]}, {0x20, @usage=0x9, 0x0, 0xff, 0x7, 0x3, 0x206, 0x7, 0x442, @struct={0x4, 0x200}, 0xf1c, 0x3, [0x0, 0x8, 0x70000, 0x7fff, 0x9, 0x1]}, {0x100000000, 0x1, 0xfc}})
recvmsg(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000001880)=@pppol2tp={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000001900)=""/230, 0xe6}], 0x1}, 0x40010000)
connect$bt_sco(r1, &(0x7f0000001a80)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001b00), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000001bc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x24, r3, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20000854)
getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001c00)=""/84, &(0x7f0000001c80)=0x54)
ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000001cc0)={@mcast2, @remote, @rand_addr=' \x01\x00', 0x9, 0xfffa, 0x3, 0x0, 0x6, 0x220106})
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f0000001e00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x24, 0x2, 0x8, 0x801, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x800)
r4 = syz_open_procfs(0x0, &(0x7f0000001e40)='stat\x00')
recvmsg(r4, &(0x7f0000003200)={&(0x7f0000001e80)=@can, 0x80, &(0x7f0000003180)=[{&(0x7f0000001f00)=""/58, 0x3a}, {&(0x7f0000001f40)=""/39, 0x27}, {&(0x7f0000001f80)=""/4096, 0x1000}, {&(0x7f0000002f80)=""/152, 0x98}, {&(0x7f0000003040)=""/49, 0x31}, {&(0x7f0000003080)=""/233, 0xe9}], 0x6}, 0x10000)
sendmsg$NFT_BATCH(r4, &(0x7f0000003d40)={&(0x7f0000003240), 0xc, &(0x7f0000003d00)={&(0x7f0000003280)={{0x14}, [@NFT_MSG_DELSETELEM={0x1e0, 0xe, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x1cc, 0x3, 0x0, 0x1, [{0x1ac, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1a8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x96, 0x1, "52419e08c69fc1f93de8bc61777efc1a1554b7b3253e1bbd9e7416466ae544ac5a14564a0854cee3f1a8646fdb65d5294fad78ce25bc42aec2bbdd23e4531840d8a339df68f04d073bdaa874da53db3630a0d55c85174b47abccd19181a7d98820f5d17cfde4047843711f8a7d2e48c34234314d644aaf85733273f5399aa8b211a21fe0f2901ec6d237fe711c0d3bc40c12"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xbe, 0x1, "9f57599b34136bffdf8fc6cc674a1bd3005cb92d25bec096bbe46c75cc53d4cf5adda95ac1048bdd2fc2d3feebbb6036dce94447c37eaa544aced423d00ecf6f5898c93ff92daf6aa728844cffe0832cf81fd8443a681a362a8cebe5f4e00f244c9a1f2ad0057ea2dec3b917e3b22a10eb8e7cab570c8a4ea8b5d9314e569f643d6dde9d7c2da19bdfa15bc62d26cb3595cc16cf602ff9bacc647f372ca4a1f0bb433be8cc8c8b4074d6f9bb8c0ca209fd5bfcb94db2a065ef18"}]}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}]}]}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x401, 0x0, 0x0, {0x3}}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}]}, @NFT_MSG_DELRULE={0x3d8, 0x8, 0xa, 0x0, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_EXPRESSIONS={0xdc, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@flow_offload={{0x11}, @void}, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}]}}, @tproxy={{0xb}, @void}]}, {0x4}, {0x6c, 0x1, 0x0, 0x1, [@hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0x80}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0xf7}]}}, @ct={{0x7}, @void}, @bitwise={{0xc}, @void}, @quota={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}}]}, {0xc, 0x1, 0x0, 0x1, [@cmp={{0x8}, @void}]}, {0x18, 0x1, 0x0, 0x1, [@flow_offload={{0x11}, @void}]}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_USERDATA={0x3d, 0x7, 0x1, 0x0, "1ed0e55f8850ee7845ece77e05fcd9d2e3b2615ea27ed5ed81fa4eef16c478dbc7a5053086227b967b5e948daaafd918e55d42addf0461c332"}, @NFTA_RULE_EXPRESSIONS={0x264, 0x4, 0x0, 0x1, [{0x260, 0x1, 0x0, 0x1, [@flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}}, @counter={{0xc}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffa}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1c7f}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7f}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xf3a1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}]}}, @rt={{0x7}, @void}, @dynset={{0xb}, @void}, @log={{0x8}, @void}, @tproxy={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xc}]}}, @limit={{0xa}, @void}, @cmp={{0x8}, @val={0x120, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x114, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x38, 0x1, "d231ab643d50ea8ea40df18cc8dc01e45276e9c8c01218c8f406ec135b5190b80af5dad334e00b73fae98d3c54a73921571547a2"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x43, 0x1, "7b90893352c5bbf4be003ac2dab479512546066d7baeaabf4c86d36d4d9cab21c9bb5051dceca4e57bc126ca49db39f5c8e0f3f0102b440eb0ee2955fa96c9"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}, @connlimit={{0xe}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xab}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x3f}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}]}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x8c, 0x5, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7f}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x401}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3ff}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0x1c, 0x6, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_ID={0x8}]}, @NFT_MSG_NEWFLOWTABLE={0x31c, 0x16, 0xa, 0x3, 0x0, 0x0, {0xc, 0x0, 0x6}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK={0x68, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK={0x258, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'gretap0\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'macvlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'sit0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'veth0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'vxcan1\x00'}]}]}]}], {0x14}}, 0xa4c}, 0x1, 0x0, 0x0, 0x40910}, 0x10000000)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000003dc0), r2)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000003e80)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000003e40)={&(0x7f0000003e00)={0x28, r5, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}]}, 0x28}, 0x1, 0x0, 0x0, 0x10008004}, 0xc000)

18:07:55 executing program 4:
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x80)
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0)
r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000001300), 0x400, 0x0)
ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000001340)={{}, {@val, @actul_num={@val=0x2d, 0xfffffffffffffff8, 0x45}}})
r1 = add_key$fscrypt_provisioning(&(0x7f0000001380), &(0x7f00000013c0)={'syz', 0x1}, &(0x7f0000001400)={0x1, 0x0, @c}, 0x29, 0xffffffffffffffff)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffff9c, 0xc0506617, &(0x7f0000001440)={@desc={0x1, 0x0, @desc1}, 0xa, r1, '\x00', @auto=[0x39, 0x24, 0x13, 0x2a, 0x17, 0x16, 0x30, 0x36, 0x3c, 0x33]})
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x6)
recvmsg(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f00000014c0)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000001580)=[{&(0x7f0000001540)=""/1, 0x1}], 0x1, &(0x7f00000015c0)=""/222, 0xde}, 0x10000)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001880)={&(0x7f0000001740)={0x104, 0x0, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_SEQ_ADJ_ORIG={0x54, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xffff0001}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2551}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x18}]}, @CTA_PROTOINFO={0x18, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x14, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x50d0}]}}, @CTA_TUPLE_MASTER={0x7c, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x207e1cdf389d1ce6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x4}]}, 0x104}, 0x1, 0x0, 0x0, 0x20008880}, 0x8000)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x30, 0xd, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008815}, 0x8000)
statx(0xffffffffffffffff, &(0x7f0000001a00)='./file0\x00', 0x6000, 0x4, &(0x7f0000001a40))
fork()
sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000001c00)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x3c, 0x6, 0x6, 0x401, 0x0, 0x0, {0xc, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x8800)
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x80000001)
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x800)
readlinkat(0xffffffffffffff9c, &(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80)=""/76, 0x4c)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000001d00)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
fchmodat(0xffffffffffffff9c, &(0x7f0000002100)='./file0\x00', 0x180)
r2 = gettid()
syz_open_procfs$namespace(r2, &(0x7f0000002140)='ns/ipc\x00')

18:07:55 executing program 7:
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x4}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x200080c5)
sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, r0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_CCA_MODE={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x134, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0xf4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xed, 0x4, "0779ccc43decd278d353ff6dc266139bf09a99e3082f95661d0044099eb975982ce79709d950ecf1afcb46327d1df60659018f5457a4e45d581f945b52aebd9fe355517417e2692ee10fcc2466f2d8b37720ceeac35feaf5b26f9dfdab546019edc5bbb99cedadda1262bbf3f250ad3473dd1c73bc31e57d9ccfb4c92edb808e8020070f142e7d7e6b8bb6c4dd97620219180c76362844a738f3c04716dd5181fa42ba210ff26b3a7bc96c7b606204dacc03fb6bd9b4c4f9c8235eaf28066266fb711d17020b9e20c3e74f453d4976880d8076e9f3fc667269691838432a0f6b1b1b07d35d75a14271"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x20044010}, 0x91)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffff9c, 0xc0406619, &(0x7f00000004c0)={@desc={0x1, 0x0, @auto="7361144e51aac839"}})
socketpair(0x26, 0x80000, 0x1c5, &(0x7f0000000500)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x500c1}, 0x4)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wpan3\x00', <r2=>0x0})
sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r0, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000)
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x74, r0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVKEY={0x4c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x10, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x29d8c7aada07f2b7}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xca22}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x4004800)
sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000008c0), 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x20, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x44000)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f00000009c0))
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r3, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x2c, r0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x10000)
sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x3c, 0xe, 0x6, 0x101, 0x0, 0x0, {0xc}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040015}, 0x4000)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x30, 0x1, 0x4, 0x101, 0x0, 0x0, {0xc, 0x0, 0x8}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x2}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x80000001}, @NFULA_CFG_MODE={0xa, 0x2, {0x2, 0x2}}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0xc040)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000d40)={'wpan3\x00', <r5=>0x0})
sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r4, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x30, r0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x80)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x50, r0, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_ENABLED={0x5, 0x1e, 0x1}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x5}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x400}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x1e, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x810}, 0x48000)

[   81.936381] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   81.937885] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   81.939034] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   81.942397] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   81.944835] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   81.946897] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   81.986850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   81.991990] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   82.003761] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   82.007146] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   82.014812] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   82.016454] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   82.019560] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   82.023139] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   82.025315] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   82.027533] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   82.030746] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   82.033724] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   82.036248] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   82.041661] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   82.044006] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   82.046123] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   82.048510] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   82.051034] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   82.053284] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   82.055914] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   82.066292] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   82.074102] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   82.076435] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   82.079923] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   82.082025] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   82.086342] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   82.088953] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   82.093643] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   82.096760] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   82.098289] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   82.102521] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   82.104552] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   82.106225] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   82.106231] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   82.109311] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   82.111241] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   82.111773] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   82.133321] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   82.137854] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   82.140032] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   82.154220] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   82.173795] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   83.981111] Bluetooth: hci0: command tx timeout
[   84.109711] Bluetooth: hci2: command tx timeout
[   84.110035] Bluetooth: hci1: command tx timeout
[   84.174724] Bluetooth: hci6: command tx timeout
[   84.175386] Bluetooth: hci3: command tx timeout
[   84.238125] Bluetooth: hci7: command tx timeout
[   84.238184] Bluetooth: hci4: command tx timeout
[   84.238783] Bluetooth: hci5: command tx timeout
[   86.028676] Bluetooth: hci0: command tx timeout
[   86.156844] Bluetooth: hci2: command tx timeout
[   86.157730] Bluetooth: hci1: command tx timeout
[   86.220762] Bluetooth: hci6: command tx timeout
[   86.222509] Bluetooth: hci3: command tx timeout
[   86.285654] Bluetooth: hci5: command tx timeout
[   86.285683] Bluetooth: hci4: command tx timeout
[   86.286119] Bluetooth: hci7: command tx timeout
[   88.077644] Bluetooth: hci0: command tx timeout
[   88.214848] Bluetooth: hci1: command tx timeout
[   88.215352] Bluetooth: hci2: command tx timeout
[   88.269648] Bluetooth: hci3: command tx timeout
[   88.270145] Bluetooth: hci6: command tx timeout
[   88.332911] Bluetooth: hci4: command tx timeout
[   88.333430] Bluetooth: hci7: command tx timeout
[   88.334063] Bluetooth: hci5: command tx timeout
[   90.124687] Bluetooth: hci0: command tx timeout
[   90.252792] Bluetooth: hci2: command tx timeout
[   90.254109] Bluetooth: hci1: command tx timeout
[   90.316777] Bluetooth: hci3: command tx timeout
[   90.318065] Bluetooth: hci6: command tx timeout
[   90.380720] Bluetooth: hci4: command tx timeout
[   90.381230] Bluetooth: hci5: command tx timeout
[   90.381958] Bluetooth: hci7: command tx timeout
[  141.877760] syz-executor.5 (285) used greatest stack depth: 23568 bytes left
[  144.254710] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  144.259836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  144.261422] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  144.268705] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  144.272331] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  144.274770] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  144.474882] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  144.478837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  144.481052] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  144.486180] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  144.492965] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  144.495456] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  144.538290] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  144.545075] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  144.559169] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  144.565818] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  144.575878] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  144.581204] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  144.597869] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  144.610484] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  144.613489] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  144.616371] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  144.618733] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  144.624973] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  144.632220] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  144.634314] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  144.639214] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  144.649810] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  144.652208] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  144.659244] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  144.676993] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  144.693222] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  144.693887] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  144.700950] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  144.710054] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  144.724095] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  144.763882] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  144.770534] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  144.772532] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  144.776922] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  144.780901] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  144.793162] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  144.795788] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  144.797486] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  144.802178] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  144.803390] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  144.806225] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  144.812882] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  146.317666] Bluetooth: hci0: command tx timeout
[  146.574031] Bluetooth: hci1: command tx timeout
[  146.637109] Bluetooth: hci2: command tx timeout
[  146.765847] Bluetooth: hci3: command tx timeout
[  146.767831] Bluetooth: hci4: command tx timeout
[  146.893926] Bluetooth: hci6: command tx timeout
[  146.895844] Bluetooth: hci5: command tx timeout
[  146.956818] Bluetooth: hci7: command tx timeout
[  148.364986] Bluetooth: hci0: command tx timeout
[  148.621734] Bluetooth: hci1: command tx timeout
[  148.684807] Bluetooth: hci2: command tx timeout
[  148.813723] Bluetooth: hci3: command tx timeout
[  148.814274] Bluetooth: hci4: command tx timeout
[  148.943488] Bluetooth: hci6: command tx timeout
[  148.944227] Bluetooth: hci5: command tx timeout
[  149.004658] Bluetooth: hci7: command tx timeout
[  150.412738] Bluetooth: hci0: command tx timeout
[  150.668674] Bluetooth: hci1: command tx timeout
[  150.732626] Bluetooth: hci2: command tx timeout
[  150.862666] Bluetooth: hci4: command tx timeout
[  150.864100] Bluetooth: hci3: command tx timeout
[  150.989656] Bluetooth: hci6: command tx timeout
[  150.990266] Bluetooth: hci5: command tx timeout
[  151.053625] Bluetooth: hci7: command tx timeout
[  152.461678] Bluetooth: hci0: command tx timeout
[  152.718626] Bluetooth: hci1: command tx timeout
[  152.781816] Bluetooth: hci2: command tx timeout
[  152.909808] Bluetooth: hci4: command tx timeout
[  152.911523] Bluetooth: hci3: command tx timeout
[  153.036770] Bluetooth: hci5: command tx timeout
[  153.038401] Bluetooth: hci6: command tx timeout
[  153.102616] Bluetooth: hci7: command tx timeout
[  206.869277] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  206.871420] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  206.873855] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  206.877334] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  206.879975] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  206.881201] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  207.521420] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  207.525894] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  207.527210] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  207.531361] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  207.533837] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  207.535280] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  207.550319] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  207.567118] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  207.574845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  207.585048] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  207.598830] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  207.612037] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  207.704236] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  207.717055] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  207.728740] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  207.729716] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  207.732775] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  207.734359] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  207.737739] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  207.739736] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  207.742765] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  207.746426] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  207.747705] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  207.754799] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  207.767575] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  207.781798] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  207.795316] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  207.806970] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  207.820841] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  207.822000] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  207.830123] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  207.833714] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  207.844241] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  207.854187] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  207.873808] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  207.875823] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  207.898211] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  207.926125] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  207.932053] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  207.983793] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  207.987470] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  207.990814] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  208.909773] Bluetooth: hci0: command tx timeout
[  209.612642] Bluetooth: hci1: command tx timeout
[  209.677985] Bluetooth: hci2: command tx timeout
[  209.804980] Bluetooth: hci5: command tx timeout
[  209.932679] Bluetooth: hci3: command tx timeout
[  209.932700] Bluetooth: hci6: command tx timeout
[  209.932903] Bluetooth: hci4: command tx timeout
[  210.061666] Bluetooth: hci7: command tx timeout
[  210.957642] Bluetooth: hci0: command tx timeout
[  211.660671] Bluetooth: hci1: command tx timeout
[  211.725592] Bluetooth: hci2: command tx timeout
[  211.853935] Bluetooth: hci5: command tx timeout
[  211.981771] Bluetooth: hci3: command tx timeout
[  211.981806] Bluetooth: hci4: command tx timeout
[  211.982250] Bluetooth: hci6: command tx timeout
[  212.109661] Bluetooth: hci7: command tx timeout
[  213.005621] Bluetooth: hci0: command tx timeout
[  213.709780] Bluetooth: hci1: command tx timeout
[  213.773058] Bluetooth: hci2: command tx timeout
[  213.901809] Bluetooth: hci5: command tx timeout
[  214.029631] Bluetooth: hci4: command tx timeout
[  214.031025] Bluetooth: hci3: command tx timeout
[  214.031090] Bluetooth: hci6: command tx timeout
[  214.157730] Bluetooth: hci7: command tx timeout
[  215.052618] Bluetooth: hci0: command tx timeout
[  215.757620] Bluetooth: hci1: command tx timeout
[  215.821660] Bluetooth: hci2: command tx timeout
[  215.949656] Bluetooth: hci5: command tx timeout
[  216.077595] Bluetooth: hci6: command tx timeout
[  216.077664] Bluetooth: hci4: command tx timeout
[  216.078114] Bluetooth: hci3: command tx timeout
[  216.204735] Bluetooth: hci7: command tx timeout
[  269.223012] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  269.227782] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  269.230724] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  269.235883] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  269.238713] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  269.245383] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  269.336595] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  269.338420] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  269.340048] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  269.343560] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  269.349146] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  269.352772] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  269.515838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  269.563830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  269.578657] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  269.598740] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  269.600936] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  269.602439] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  269.609138] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  269.616160] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  269.621758] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  269.632079] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  269.634267] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  269.651095] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  269.661836] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  269.664014] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  269.664882] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  269.665846] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  269.666797] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  269.671736] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  269.673817] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  269.674740] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  269.686872] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  269.694232] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  269.698827] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  269.699801] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  269.710738] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  269.712400] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  269.713495] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  269.726258] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  269.754923] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  269.761505] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  269.777763] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  269.789644] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  269.794363] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  269.807764] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  269.811248] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  269.814883] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  271.308649] Bluetooth: hci0: command tx timeout
[  271.372710] Bluetooth: hci1: command tx timeout
[  271.628763] Bluetooth: hci2: command tx timeout
[  271.757617] Bluetooth: hci4: command tx timeout
[  271.757663] Bluetooth: hci6: command tx timeout
[  271.820708] Bluetooth: hci5: command tx timeout
[  271.822660] Bluetooth: hci3: command tx timeout
[  271.884635] Bluetooth: hci7: command tx timeout
[  273.356634] Bluetooth: hci0: command tx timeout
[  273.420897] Bluetooth: hci1: command tx timeout
[  273.677691] Bluetooth: hci2: command tx timeout
[  273.804704] Bluetooth: hci4: command tx timeout
[  273.806112] Bluetooth: hci6: command tx timeout
[  273.868989] Bluetooth: hci3: command tx timeout
[  273.870375] Bluetooth: hci5: command tx timeout
[  273.933791] Bluetooth: hci7: command tx timeout
[  275.405644] Bluetooth: hci0: command tx timeout
[  275.468756] Bluetooth: hci1: command tx timeout
[  275.726097] Bluetooth: hci2: command tx timeout
[  275.853622] Bluetooth: hci6: command tx timeout
[  275.853681] Bluetooth: hci4: command tx timeout
[  275.916802] Bluetooth: hci3: command tx timeout
[  275.918601] Bluetooth: hci5: command tx timeout
[  275.983575] Bluetooth: hci7: command tx timeout
[  277.452721] Bluetooth: hci0: command tx timeout
[  277.517602] Bluetooth: hci1: command tx timeout
[  277.773571] Bluetooth: hci2: command tx timeout
[  277.900628] Bluetooth: hci4: command tx timeout
[  277.901632] Bluetooth: hci6: command tx timeout
[  277.964721] Bluetooth: hci3: command tx timeout
[  277.966100] Bluetooth: hci5: command tx timeout
[  278.028603] Bluetooth: hci7: command tx timeout
[  331.674893] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  331.676466] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  331.678834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  331.687438] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  331.691270] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  331.693154] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  331.869713] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  331.872956] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  331.877877] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  331.881248] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  331.888937] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  331.890353] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  331.894648] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  331.896877] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  331.898180] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  331.908466] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  331.914599] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  331.929466] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  331.940047] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  331.945159] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  331.950961] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  331.965812] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  331.975975] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  331.979800] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  332.071256] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  332.074323] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  332.084244] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  332.091767] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  332.092980] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  332.094937] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  332.138451] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  332.139318] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  332.147836] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  332.147914] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  332.149904] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  332.152724] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  332.165730] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  332.168926] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  332.170231] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  332.174862] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  332.176576] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  332.177939] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  332.211117] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  332.215171] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  332.218259] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  332.223264] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  332.225219] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  332.227128] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  333.708693] Bluetooth: hci0: command tx timeout
[  333.964748] Bluetooth: hci2: command tx timeout
[  333.965839] Bluetooth: hci1: command tx timeout
[  334.093668] Bluetooth: hci3: command tx timeout
[  334.221674] Bluetooth: hci7: command tx timeout
[  334.221786] Bluetooth: hci5: command tx timeout
[  334.284796] Bluetooth: hci4: command tx timeout
[  334.284992] Bluetooth: hci6: command tx timeout
[  335.757693] Bluetooth: hci0: command tx timeout
[  336.013705] Bluetooth: hci1: command tx timeout
[  336.013762] Bluetooth: hci2: command tx timeout
[  336.141826] Bluetooth: hci3: command tx timeout
[  336.268647] Bluetooth: hci5: command tx timeout
[  336.271595] Bluetooth: hci7: command tx timeout
[  336.332635] Bluetooth: hci4: command tx timeout
[  336.333690] Bluetooth: hci6: command tx timeout
[  337.805596] Bluetooth: hci0: command tx timeout
[  338.060633] Bluetooth: hci1: command tx timeout
[  338.061542] Bluetooth: hci2: command tx timeout
[  338.188653] Bluetooth: hci3: command tx timeout
[  338.316665] Bluetooth: hci7: command tx timeout
[  338.318030] Bluetooth: hci5: command tx timeout
[  338.381708] Bluetooth: hci6: command tx timeout
[  338.381835] Bluetooth: hci4: command tx timeout
[  339.852579] Bluetooth: hci0: command tx timeout
[  340.108694] Bluetooth: hci1: command tx timeout
[  340.108736] Bluetooth: hci2: command tx timeout
[  340.237620] Bluetooth: hci3: command tx timeout
[  340.365486] Bluetooth: hci7: command tx timeout
[  340.367011] Bluetooth: hci5: command tx timeout
[  340.428891] Bluetooth: hci4: command tx timeout
[  340.429437] Bluetooth: hci6: command tx timeout

VM DIAGNOSIS:
18:12:56  Registers:
info registers vcpu 0
RAX=0000000000000001 RBX=ffff888026527850 RCX=ffffffff84807050 RDX=0000000000000000
RSI=ffffffff8480705d RDI=ffff88806ce36380 RBP=0000000000000000 RSP=ffff888026527770
R8 =0000000000000001 R9 =fffffbfff0fda9d4 R10=0000000000000000 R11=0000000000000000
R12=ffff88800927d8c2 R13=ffff888026527868 R14=ffff88800912f0c8 R15=ffff888026527b28
RIP=ffffffff81391f54 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f43d4cb4000 CR3=000000001c114000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=6f732e616d7a6c62696c2f756e672d78
XMM02=00352e6f732e616d7a6c62696c2f756e XMM03=672d78756e696c2d34365f3638782f62
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=ffff88800d364000 RBX=000000000008d310 RCX=ffffffff81306634 RDX=ffff88800d1b3bf8
RSI=0000000000000000 RDI=ffff88800d1b5180 RBP=ffff88800d1b5180 RSP=ffff888032407d50
R8 =0000000000000001 R9 =ffffed1006480f9a R10=0000000000000003 R11=00000000000c2f81
R12=ffff88800d398068 R13=0000000000000246 R14=0000000000000000 R15=ffff88800d1b5180
RIP=ffffffff818e52b0 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fc092034540 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe7800000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f1f454086f4 CR3=000000000e6c0000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00007f1f4541747000007f1f45416f20
XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000